CVE-2026-20221: fallo de gravedad media en Cisco Cyber Vision
Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerabilities
Publicada el · Actualizada el
Seguir esta CVE+ Monitorear Cisco Secure Firewall Threat Defense+ Monitorear Cisco UTD SNORT IPS Engine
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 5.8epss 0.6%
Multiple Cisco products are affected by a vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause an unexpected restart of the Snort 3 Detection Engine.
This vulnerability is due to improper handling of nested GRE traffic. An attacker could exploit this vulnerability by sending a crafted GRE payload through an affected device. A successful exploit could allow the attacker to trigger an unexpected reload of the Snort 3 Detection Engine, resulting in either a bypass or denial of service (DoS) condition, depending on device configuration. For more information, see the section of this advisory. The Snort 3 Detection Engine will restart automatically. No manual intervention is required.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
Productos afectados
Cisco · Cisco Cyber VisionCisco · Cisco Open Source Snort3Cisco · Cisco Secure Firewall Threat Defense (FTD) SoftwareCisco · Cisco Umbrella Insights Virtual ApplianceCisco · Cisco UTD SNORT IPS Engine SoftwareCVEs relacionadas — Cisco Cyber Vision
En el mismo producto, de las más peligrosas a las menos.
CVE-2025-20362MEDIUMCVE-2025-20362EPSS 86.7%KEVCVE-2025-20333CRITICALCVE-2025-20333EPSS 72.0%KEVCVE-2026-20349HIGHCisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service VulnerabilityEPSS 1.0%KEVCVE-2026-76418HIGHCisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service VulnerabilityEPSS 0.8%KEVCVE-2022-20685HIGHMultiple Cisco Products Snort Modbus Denial of Service VulnerabilityEPSS 1.5%CVE-2020-3448MEDIUMCisco Cyber Vision Center Software Access Control Bypass VulnerabilityEPSS 1.1%